CVE-2008-2865

The CVE-2008-2865 entry concerns a SQL injection vulnerability in Kalptaru Infotech PHP Site Lock 2.0, exploitable via the articleid parameter in a show_article action. The underlying issue is unsafe SQL construction in index.php that allows remote attackers to execute arbitrary SQL commands. Imp...

CVE-2008-2865

creationtimestamp| type| source ---|---|--- 2008-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5842...

openSUSE 10 Security Update : phpPgAdmin (phpPgAdmin-4713)

Several flaws in phpPgAdmin could be exploited by remote attackers to perform cross site scripting XSS attacks CVE-2007-2865, CVE-2007-5728. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Fedora 7 : phpPgAdmin-4.1.2-1.fc7 (2007-0469)

This release includes a high-level security fix. All users must upgrade as soon as possible : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2865 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

CVE-2007-2865

Cross-site scripting XSS vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter...

CVE-2007-2865

Concrete details from multiple sources confirm CVE-2007-2865 affects phpPgAdmin via an XSS vulnerability in sqledit.php (server parameter) and is related to additional CVEs (CVE-2007-5728 via PHP_SELF, CVE-2008-5587). Affected range includes phpPgAdmin 3.5–4.1.1 (and possibly 4.1.2); exploitation...

CVE-2007-2865

Cross-site scripting XSS vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter...

CVE-2006-2865

The CVE-2006-2865 issue concerns phpBB 2 with a remote file inclusion in template.php via the page parameter, enabling an attacker to execute arbitrary PHP code. Concrete details from connected sources confirm the affected software (phpBB 2) and the vulnerable component (template.php) with the ro...

CVE-2005-2865

CVE-2005-2865 affects AMember Pro 2.3.4. The vulnerability is multiple PHP remote file inclusion via the config[root_dir] parameter in 19 include scripts, enabling execution of arbitrary PHP code. The available documents do not provide remediation steps or patch versions. Exploit details are not ...